CLAIMS 

What is claimed is: 

1 . A method of modifying a subscription of a subscriber to a telecommunications service 
based on subscriber information and service information that are stored in a directory 
repository, the method comprising the computer-implemented steps of: 

receiving a modification request to modify the subscription of the subscriber to the 

telecommunications service; 
determining, based on privilege information in a privilege token associated with the 

subscriber that is generated by an authorization service, whether the subscriber 

has privileges sufficient to carry out the requested modification; 
receiving, from the directory repository, first subscriber information and first service 

information representing only such services for which the subscriber is then 

currently subscribed; 

modifying the first subscriber information and first service information to reflect the 
modification; 

sending the modified information to the directory repository, resulting in creating and 
storing, in the directory repository, second service information that reflects the 
modification; 

generating an engagement request to engage the telecommunications service for the 
subscriber in order to fulfill the modification request. 

2. A method as recited in Claim 1, further comprising the steps of creating and storing 
the privilege token by the steps of: 

receiving a user name associated with the subscriber and mapping the user name to a 

distinguished name in the directory repository; 
creating and storing in the privilege token, one or more roles occupied by the 

subscriber based on role information that is stored in the directory repository. 
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1 3. A method as recited in Claim 1 , further comprising the steps of creating and storing a 

2 host object that uniquely identifies the subscriber for the subscriber wherein the host 

3 object contains the privilege token corresponding to the subscriber. 

14. A method as recited in Claim 1, further comprising the steps of subscribing the 

2 subscriber to the service by creating and storing a relation of a subscriber object that 

3 programmatically represents the subscriber to a service object that programmatically 

4 represents the service, and creating and storing one or more attribute values in the 

5 relation, wherein the attribute values define the subscription. 

O 

*0 1 5. A method of modifying subscriptions of a group of subscribers to one or more 

if* 

- rsr 

2 telecommunications services based on subscriber information and service information 

; 3 that are stored in a directory repository, the method comprising the computer- 

s p 4 implemented steps of: 

]*'' 5 receiving from an administrator of the group, a request to modify the subscriptions of 
13 6 the subscribers to the telecommunications service; 

I'd 

7 determining, based on privilege information in a privilege token that is associated 

^ 8 with the administrator and is generated by an authorization service, whether 

13 

^9 the administrator has privileges sufficient to carry out the requested 

10 modification; 

1 1 receiving, from the directory repository, current subscriber information and current 

12 service information representing then-current services to which the subscribers 

13 are subscribed; 

14 modifying the subscriber information and service information to reflect the 

1 5 modifications, resulting in creating and storing, in the directory repository, 

16 updated service information that reflects the modifications; 

1 7 generating one or more requests to subscribe the telecommunications service to the 

1 8 group of subscribers to fulfill the request of the administrator. 
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6. A method as recited in Claim 5, wherein the group of subscribers is defined explicitly 
by creating and storing a named group that contains one or more subscribers as group 
members. 

7. A method as recited in Claim 5, wherein the group of subscribers is defined implicitly 
such that the group comprises one or more subscribers in an object tree of the 
directory repository who are subordinate in the tree to a container node of the tree. 

8. A method as recited in Claim 5, further comprising the steps of subscribing one of the 
subscribers in the group to the service by creating and storing a relation of a 
subscriber object that programmatically represents the subscriber to a service object 
that programmatically represents the service, and creating and storing one or more 
attribute values in the relation, wherein the attribute values define the subscription. 

9. A method of automatically logging in a subscriber to a telecommunications service 
based on subscriber information and service information that are stored in a directory 
repository, the method comprising the computer-implemented steps of: 

receiving a request to from the subscriber to log in to the telecommunications service; 
performing authentication to determine whether the subscriber is allowed to log into 

the telecommunication service; 
receiving, from the directory repository, a list of all services for which the subscriber 

is then currently subscribed, including the telecommunications service; 
automatically logging the subscriber into all services identified in the list. 

10. A method as recited in Claim 9, wherein automatically logging the subscriber into all 
services identified in the list comprises the steps of: 

for each of the services identified in the list: 

obtaining service information that describes the services from the directory repository; 
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creating and storing a relation between a service object in the directory repository that 
uniquely identifies and represents each of the services and privileges of the 
subscriber, and a subscriber object that uniquely represents the subscriber. 

11. A method as recited in Claim 1 0, further comprising the steps of storing the privilege 
token in a service selection gateway for use in subsequent authorization processes 
relating to the subscriber. 

12. A method as recited in Claim 10, wherein performing authentication to determine 
whether the subscriber is allowed to log into the telecommunication service further 
comprises the steps of: 

creating and storing a privilege token that uniquely identifies the subscriber; 

determining, based on privilege information in a privilege token associated with the 

subscriber that is generated by an authorization service, whether the subscriber 
has privileges sufficient to carry out the automatic login. 

13. A method of automatically subscribing a subscriber to a telecommunications service 
based on subscriber information and service information that are stored in a directory 
repository, the method comprising the computer-implemented steps of: 

receiving a request from the subscriber to obtain a list of available 

telecommunications services; 
generating a list of only those telecommunications services for which the subscriber 

has a privilege to subscribe to, based on privilege information and service 

information that is stored in the directory repository and associated with the 

subscriber; 

receiving a subscriber selection of one of the telecommunications services; 
verifying that the subscriber has privileges that permit the subscriber to subscribe to 

the selected telecommunications service; 
creating and storing updated subscription information in the directory repository; 
generating a request to subscribe the subscriber to the selected telecommunications 

service based on the updated subscription information. 
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1 14. A method as recited in Claim 13, further comprising the steps of retrieving a privilege 

2 token for the subscriber that identifies a role of the subscriber that maps to one or 

3 more privileges of the subscriber, in response to receiving a request to from the 

4 subscriber to obtain a list of available telecommunications services, wherein the 

5 privileges of the subscriber specify what telecommunications services to which the 

6 subscriber is entitled to subscribe. 



n 
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1 15. A method as recited in Claim 13, wherein generating a list of only those 

2 telecommunications services for which the subscriber has a privilege to subscribe to 

3 includes the step of generating and providing to the subscriber a custom display page 

4 that identifies only those telecommunications services for which the subscriber has a 

5 privilege to subscribe. 

1 16. A computer-readable medium carrying one or more sequences of instructions for 

"J 5 2 modifying a subscription of a subscriber to a telecommunications service based on 

O 3 subscriber information and service information that are stored in a directory 

ill 

4 repository, which instructions, when executed by one or more processors, cause the 

5 one or more processors to carry out the steps of: 

{si 6 receiving a modification request to modify the subscription of the subscriber to the 

7 telecommunications service; 

8 determining, based on privilege information in a privilege token associated with the 

9 subscriber that is generated by an authorization service, whether the subscriber 

1 0 has privileges sufficient to carry out the requested modification; 

1 1 receiving, from the directory repository, first subscriber information and first service 

12 information representing only such services for which the subscriber is then 

13 currently subscribed; 

14 modifying the first subscriber information and first service information to reflect the 

1 5 modification; 
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1 6 sending the modified information to the directory repository, resulting in creating and 

17 storing, in the directory repository, second service information that reflects the 

18 modification; 

1 9 generating an engagement request to engage the telecommunications service for the 

20 subscriber in order to fulfill the modification request. 

1 1 7. An apparatus for modifying a subscription of a subscriber to a telecommunications 

2 service based on subscriber information and service information that are stored in a 

3 directory repository, comprising: 

4 means for receiving a modification request to modify the subscription of the 

5 subscriber to the telecommunications service; 

6 means for determining, based on privilege information in a privilege token associated 

7 with the subscriber that is generated by an authorization service, whether the 

8 subscriber has privileges sufficient to carry out the requested modification; 

9 means for receiving, from the directory repository, first subscriber information and 

10 first service information representing only such services for which the 

1 1 subscriber is then currently subscribed; 

12 means for modifying the first subscriber information and first service information to 

1 3 reflect the modification; 

14 means for sending the modified information to the directory repository, resulting in 

1 5 creating and storing, in the directory repository, second service information 

1 6 that reflects the modification; 

1 7 means for generating an engagement request to engage the telecommunications 

1 8 service for the subscriber in order to fulfill the modification request. 

1 18. An apparatus for modifying a subscription of a subscriber to a telecommunications 

2 service based on subscriber information and service information that are stored in a 

3 directory repository, comprising: 

4 a network interface that is coupled to a data network that includes the directory 

5 repository for receiving information therefrom; 

6 a processor; 
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7 one or more stored sequences of instructions which, when executed by the processor, 

8 cause the processor to carry out the steps of: 

9 receiving a modification request to modify the subscription of the subscriber 

1 0 to the telecommunications service; 

1 1 determining, based on privilege information in a privilege token associated 

12 with the subscriber that is generated by an authorization service, 

13 whether the subscriber has privileges sufficient to carry out the 

1 4 requested modification; 

15 receiving, from the directory repository, first subscriber information and first 

16 service information representing only such services for which the 

1 7 subscriber is then currently subscribed; 

1 8 modifying the first subscriber information and first service information to 

1 9 reflect the modification; 

20 sending the modified information to the directory repository, resulting in 

21 creating and storing, in the directory repository, second service 

22 information that reflects the modification; 

23 generating an engagement request to engage the telecommunications service 

24 for the subscriber in order to fulfill the modification request. 

1 19. A method of modifying a subscription of a subscriber to a telecommunications service 

2 based on information stored in a directory repository, the method comprising the 

3 computer-implemented steps of: 

4 receiving a request to identify one or more services to which a subscriber is 

5 subscribed, based on a prior request to modify the subscription of the 

6 subscriber to the telecommunications service; 

7 generating a list of the one or more services to which the subscriber is currently 

8 subscribed, based on group membership of the subscriber, one or more roles 

9 occupied by the subscriber, and authorization information associated with the 
10 subscriber that is stored in the directory repository; 
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1 1 generating individual service information for each of the one or more services in the 

12 list, based on subscriber information and service information that is stored in 

1 3 the directory repository, for use in automatically subscribing the subscriber to 

14 a service that is represented by the individual service information. 





1 20. 


A computer-readable medium carrying one or more sequences of instructions for 




2 


modifying a subscription of a subscriber to a telecommunications service based on 




3 


subscriber information and service information that are stored in a directory 




4 


repository, which instructions, when executed by one or more processors, cause the 




5 


one or more processors to carry out the steps of: 




6 


receiving a request to identify one or more services to which a subscriber is 


-.n< 


7 


subscribed, based on a prior request to modify the subscription of the 


19 


8 


subscriber to the telecommunications service; 
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9 


generating a list of the one or more services to which the subscriber is currently 


: 

Hi" 


10 


subscribed, based on group membership of the subscriber, one or more roles 


IP 


11 


occupied by the subscriber, and authorization information associated with the 


o 


12 


subscriber that is stored in the directory repository; 




13 


generating individual service information for each of the one or more services in the 


J S3. 


14 


list, based on subscriber information and service information that is stored in 




15 


the directory repository, for use in automatically subscribing the subscriber to 




16 


a service that is represented by the individual service information. 



1 21 . An apparatus for modifying a subscription of a subscriber to a telecommunications 

2 service based on subscriber information and service information that are stored in a 

3 directory repository, comprising: 

4 means for receiving a request to identify one or more services to which a subscriber is 

5 subscribed, based on a prior request to modify the subscription of the 

6 subscriber to the telecommunications service; 
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7 means for generating a list of the one or more services to which the subscriber is 

8 currently subscribed, based on group membership of the subscriber, one or 

9 more roles occupied by the subscriber, and authorization information 

10 associated with the subscriber that is stored in the directory repository; 

1 1 means for generating individual service information for each of the one or more 

12 services in the list, based on subscriber information and service information 

1 3 that is stored in the directory repository, for use in automatically subscribing 

14 the subscriber to a service that is represented by the individual service 

15 information. 

1 22. An apparatus for modifying a subscription of a subscriber to a telecommunications 

2 service based on subscriber information and service information that are stored in a 

3 directory repository, comprising: 

4 a directory-enabled service selection framework that is coupled to the directory 

5 repository for receiving stored information therefrom; 

6 a processor; 

7 one or more stored sequences of instructions in the framework which, when executed 

8 by the processor, cause the processor to carry out the steps of: 

9 receiving a request to identify one or more services to which a subscriber is 

10 subscribed, based on a prior request to modify the subscription of the 

1 1 subscriber to the telecommunications service; 

12 generating a list of the one or more services to which the subscriber is 

13 currently subscribed, based on group membership of the subscriber, 

14 one or more roles occupied by the subscriber, and authorization 

1 5 information associated with the subscriber that is stored in the 

1 6 directory repository; 

17 generating individual service information for each of the one or more services 

1 8 in the list, based on subscriber information and service information that 

19 is stored in the directory repository, for use in automatically 

20 subscribing the subscriber to a service that is represented by the 

21 individual service information. 
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